Hey there @itsm welcome to the community, and I apologize for the delayed response!
You’re thinking here makes sense to me 
Your best bet is to use the express-oauth2-jwt-bearer library in your Node backend. You can find some helpful examples here.
Hope this helps!